CVE-2026-57571

{"id": "CVE-2026-57571", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-57571", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-07T14:53:33.142454Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "unclecode", "product": "crawl4ai", "versions": [{"status": "affected", "version": "< 0.9.0"}]}]}], "published": "2026-07-06T21:16:57.907", "references": [{"url": "https://github.com/unclecode/crawl4ai/commit/60886d1a0c52682e4c83a7cef9dfac417fff6bd2", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/unclecode/crawl4ai/security/advisories/GHSA-2jq4-q6vv-4cp3", "tags": ["Mitigation", "Vendor Advisory", "Exploit"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-59"}]}], "descriptions": [{"lang": "en", "value": "Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, when the crawler saves a downloaded file, the destination filename was taken from attacker-influenced input and joined to the downloads directory with no confinement. A filename containing an absolute path or traversal escaped the downloads directory, giving an arbitrary file write with attacker-controlled contents; the HTTP crawler path uses the response Content-Disposition filename and the browser crawler path uses the download's suggested filename. Because the written bytes are attacker-controlled, this can escalate to remote code execution. This issue is fixed in version 0.9.0."}, {"lang": "es", "value": "Crawl4AI es un rastreador y extractor web de c\u00f3digo abierto compatible con LLM. Antes de la versi\u00f3n 0.9.0, cuando el rastreador guardaba un archivo descargado, el nombre del archivo de destino se tomaba de una entrada influenciada por el atacante y se un\u00eda al directorio de descargas sin confinamiento. Un nombre de archivo que conten\u00eda una ruta absoluta o de recorrido escapaba del directorio de descargas, permitiendo una escritura de archivo arbitraria con contenido controlado por el atacante; la ruta del rastreador HTTP utiliza el nombre de archivo Content-Disposition de la respuesta y la ruta del rastreador del navegador utiliza el nombre de archivo sugerido de la descarga. Dado que los bytes escritos est\u00e1n controlados por el atacante, esto puede escalar a ejecuci\u00f3n remota de c\u00f3digo. Este problema se solucion\u00f3 en la versi\u00f3n 0.9.0."}], "lastModified": "2026-10-25T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7ED5B79-F478-4E2C-B384-BA572D992FAA", "versionEndExcluding": "0.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}